# Latest **URL:** https://discuss.elastic.co/latest.md?page=967 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 968 --- ## [PDF, jpeg/jpg and other file types ingests](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 15\ **Last updated:** [September 14, 2022, 7:08am UTC](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860 "2022-09-14T07:08:19Z")
Hello There! I am looking for a tutorial how can I ingest/parse/analyze files like \*.pdf or .jpeg/.jpg and other types. I have found this article but I don't use docker/k8s. Could you be so kind and show me other tuto… --- ## [Unable to start Elastic.service 'setting \[cluster.initial\_master\_nodes\] is not allowed when \[discovery.type\] is set to \[single-node\]'](https://discuss.elastic.co/t/unable-to-start-elastic-service-setting-cluster-initial-master-nodes-is-not-allowed-when-discovery-type-is-set-to-single-node/314375)
**Author:** [@Neophyte](https://discuss.elastic.co/u/Neophyte)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 6:59am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-service-setting-cluster-initial-master-nodes-is-not-allowed-when-discovery-type-is-set-to-single-node/314375 "2022-09-14T06:59:35Z")
I am trying to set up a SIEM HOME LAB environment and install the latest Elastic and kibana on Ubuntu, but the service is not starting up, and am receiving the following errors: messi@fifa:~/Desktop$ sudo systemctl rest… --- ## [Transform Mapping Errors](https://discuss.elastic.co/t/transform-mapping-errors/313382)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 12\ **Last updated:** [September 14, 2022, 6:57am UTC](https://discuss.elastic.co/t/transform-mapping-errors/313382 "2022-09-14T06:57:51Z")
Hello, I've set up a transform to aggregate on process.name, however it continues to fail exactly on the same date with the following error - Failed to index documents into destination index due to permanent error: \[or… --- ## [Elastic unable to start after turning it off](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532)
**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 6:37am UTC](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532 "2022-09-14T06:37:43Z")
Hello, I have a cluster of 3 ES nodes that use 7.16.3. All of them are both masters and data (as I am trying to deploy a minimal ES cluster that is resistant to the failure of one of the nodes). Maybe this is not a good… --- ## [Upgrading Elastic Stack from 7.7.0 to 7.17.6](https://discuss.elastic.co/t/upgrading-elastic-stack-from-7-7-0-to-7-17-6/314224)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 3\ **Last updated:** [September 14, 2022, 6:27am UTC](https://discuss.elastic.co/t/upgrading-elastic-stack-from-7-7-0-to-7-17-6/314224 "2022-09-14T06:27:24Z")
Hello. It has been over 2 years since I last installed the Elastic stack locally in our environment (Kibana, Elasticsearch, Logstash, FileBeat). The version we are on right now is 7.7.0 for all products. I'm not sure … --- ## [How to avoid double indexing when using rollover indice](https://discuss.elastic.co/t/how-to-avoid-double-indexing-when-using-rollover-indice/314366)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 7\ **Last updated:** [September 14, 2022, 6:18am UTC](https://discuss.elastic.co/t/how-to-avoid-double-indexing-when-using-rollover-indice/314366 "2022-09-14T06:18:52Z")
Hello All, I'm using the rollover feature for my indices on daily basis along with doc\_as\_upsert,to maintain unique documents only.The rollover Index gets deleted after 30 days. I can see the issue of double indexing,E… --- ## [Filter http - delete by query doesn't work](https://discuss.elastic.co/t/filter-http-delete-by-query-doesnt-work/314371)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 6:18am UTC](https://discuss.elastic.co/t/filter-http-delete-by-query-doesnt-work/314371 "2022-09-14T06:18:22Z")
Hi guys, in my pipeline, filter section I use the http plugin in order to remove old data: http { url =\> "http://localhost:9200/test-main/\_delete\_by\_query" verb =\> "POST" body\_format =\> … --- ## [Selective deletion of indices](https://discuss.elastic.co/t/selective-deletion-of-indices/314370)
**Author:** [@newbie2022](https://discuss.elastic.co/u/newbie2022)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/selective-deletion-of-indices/314370 "2022-09-14T06:13:42Z")
I have a ruby web app with a search function that is enabled by Elasticsearch. There are 2 types of content Content A which should be searchable indefinitely Content B which is time-sensitive and no longer relevant af… --- ## [How to convert dates to months format](https://discuss.elastic.co/t/how-to-convert-dates-to-months-format/314252)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 6:07am UTC](https://discuss.elastic.co/t/how-to-convert-dates-to-months-format/314252 "2022-09-14T06:07:09Z")
Hi I've data in this format "Admission \_date" : "2020-01-28", "id" : 78 when I visualize the data in this format I get results like this X axis : admission date Y axis : count of records I want the mon… --- ## [Can filebeat 8.4 send to older elasticsearch 7.15](https://discuss.elastic.co/t/can-filebeat-8-4-send-to-older-elasticsearch-7-15/314310)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 5:26am UTC](https://discuss.elastic.co/t/can-filebeat-8-4-send-to-older-elasticsearch-7-15/314310 "2022-09-14T05:26:17Z")
Hello, Is it possible for filebeat 8.4 to send to an older cluster such as elasticsearch 7.15? --- ## [Logstash unable to start and collect logs](https://discuss.elastic.co/t/logstash-unable-to-start-and-collect-logs/314296)
**Author:** [@khanchand](https://discuss.elastic.co/u/khanchand)\ **Replies:** 10\ **Last updated:** [September 14, 2022, 5:24am UTC](https://discuss.elastic.co/t/logstash-unable-to-start-and-collect-logs/314296 "2022-09-14T05:24:15Z")
Hi I have configure Elasticsearch, kibana & logstash on same machine. Want to receive firewall logs in logstash but facing below error. For now want to show these event on console only once received will forward in elast… --- ## [How to handle more than 32 filter in elasticseacrh UI](https://discuss.elastic.co/t/how-to-handle-more-than-32-filter-in-elasticseacrh-ui/314362)
**Author:** [@manojxumulus](https://discuss.elastic.co/u/manojxumulus)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 5:21am UTC](https://discuss.elastic.co/t/how-to-handle-more-than-32-filter-in-elasticseacrh-ui/314362 "2022-09-14T05:21:28Z")
Hello, I have one issue related to the limit on filters applied to results in Elasticsearch UI, I would like to know how I can handle more than 32 filters or add any error boundary in the app for handling the error. Lo… --- ## [Not able connect to elastic apm server from AWS lambda](https://discuss.elastic.co/t/not-able-connect-to-elastic-apm-server-from-aws-lambda/312813)
**Author:** [@Pratiksha\_Nagoshe](https://discuss.elastic.co/u/Pratiksha_Nagoshe)\ **Replies:** 23\ **Last updated:** [September 14, 2022, 5:09am UTC](https://discuss.elastic.co/t/not-able-connect-to-elastic-apm-server-from-aws-lambda/312813 "2022-09-14T05:09:43Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Unassigned shards on data-streams indices following upgrade to 7.17.5](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 5:08am UTC](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130 "2022-09-14T05:08:42Z")
Hey, Recently i have upgraded a few of our clusters from 7.12.0 to 7.17.5. After the upgrade two indices were created: .ds-.logs-deprecation.elasticsearch-default-2022.09.07-000001 and .ds-ilm-history-5-2022.09.07-000… --- ## [Can I display search box and search results in separate React components](https://discuss.elastic.co/t/can-i-display-search-box-and-search-results-in-separate-react-components/314364)
**Author:** [@Sheng111](https://discuss.elastic.co/u/Sheng111)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 5:04am UTC](https://discuss.elastic.co/t/can-i-display-search-box-and-search-results-in-separate-react-components/314364 "2022-09-14T05:04:32Z")
I am thinking to create a search box with Elastic search UI library, my requirements are display search box in header of all the website, but search results will display in a different React components as a part of the p… --- ## [Kibana cannot connect to the Elastic Package Registry, which provides Elastic Agent integrations](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/314107)
**Author:** [@Sher\_Khan](https://discuss.elastic.co/u/Sher_Khan)\ **Replies:** 8\ **Last updated:** [September 14, 2022, 4:37am UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-the-elastic-package-registry-which-provides-elastic-agent-integrations/314107 "2022-09-14T04:37:54Z")
How to resolve this issue? --- ## [Threat detection EQL error](https://discuss.elastic.co/t/threat-detection-eql-error/314250)
**Author:** [@zhixiang\_hao](https://discuss.elastic.co/u/zhixiang_hao)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 1:19am UTC](https://discuss.elastic.co/t/threat-detection-eql-error/314250 "2022-09-14T01:19:33Z")
Does anyone know what's causing it? --- ## [Sending events from specific ip adress to specific index](https://discuss.elastic.co/t/sending-events-from-specific-ip-adress-to-specific-index/314344)
**Author:** [@wmulobole1](https://discuss.elastic.co/u/wmulobole1)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 11:36pm UTC](https://discuss.elastic.co/t/sending-events-from-specific-ip-adress-to-specific-index/314344 "2022-09-13T23:36:16Z")
Hi, I am trying to separate my indexes by ip address. I want logs coming from three particular ips to go a specific index and the rest to go another index. I am not successful because the index is not showing up in Kiban… --- ## [Sending fortinalyzer logs to SIEM](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 5\ **Last updated:** [September 13, 2022, 10:29pm UTC](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149 "2022-09-13T22:29:37Z")
Hello Community Are the fortianalyzer supported by filebeat? if yes can you help me with its configuration at filebeat level by specifying the part to be addressed? Thanks, --- ## [Can I change the locations to local infra for the monitor using Project monitors to Synthetic monitoring](https://discuss.elastic.co/t/can-i-change-the-locations-to-local-infra-for-the-monitor-using-project-monitors-to-synthetic-monitoring/312398)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 9:03pm UTC](https://discuss.elastic.co/t/can-i-change-the-locations-to-local-infra-for-the-monitor-using-project-monitors-to-synthetic-monitoring/312398 "2022-09-13T21:03:07Z")
Can I change the locations to local infra for the monitor using Project monitors to Synthetic monitoring? In the future, we don't have any cost about that we will use the private infra elastic. --- ## [Urgent : How to get the IOPS logs from Windows Server 2003](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 8:10pm UTC](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335 "2022-09-13T20:10:13Z")
Hi Community, I'm new to the community and I need an urgent support. I have a windows server 2003 R2 based couple of DB servers. My questions is how can I collect the IOPS log and monitor via Kibana interface. Note: … --- ## [Canvas mapColumn and essql query](https://discuss.elastic.co/t/canvas-mapcolumn-and-essql-query/314334)
**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 8:01pm UTC](https://discuss.elastic.co/t/canvas-mapcolumn-and-essql-query/314334 "2022-09-13T20:01:58Z")
Hi, I'm wondering if it is possible to use an essql query in a mapColumn. I try to make second column and want to use the value in the first column to check if it exists in another index by using an essql query. But I… --- ## [Elastic-Agent - failed to dispatch actions, error: could not parse the configuration from the policy: duplicate key accessing 'ssl.certificate\_authorities'](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333)
**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:18pm UTC](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333 "2022-09-13T19:18:06Z")
Hi, I have recently added Fleet Server to my stack, but I am having problems with my SSL Certificates (\*Wild Card Certs). I have been able to successfully to integrate new certificates for both Transport and HTTP, but I … --- ## [Filebeat docker container - Can we modify filebeat.yml file using docker ENTRYPOINT](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230)
**Author:** [@ramreddy](https://discuss.elastic.co/u/ramreddy)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230 "2022-09-13T19:47:25Z")
Hi, we are using docker/ECS filebeat containers, currently as part of docker build we copy filebeat-(aws\_account).yml to /usr/share/filebeat/filebeat.yml with account specific values. But while doing this process we have… --- ## [Data Analysis with Kibana On-Demand: Lab1.1 Machine Learning and Graph not available](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-lab1-1-machine-learning-and-graph-not-available/314329)
**Author:** [@mpb9010](https://discuss.elastic.co/u/mpb9010)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 6:31pm UTC](https://discuss.elastic.co/t/data-analysis-with-kibana-on-demand-lab1-1-machine-learning-and-graph-not-available/314329 "2022-09-13T18:31:32Z")
I am following the instructions on Lab 1.1 step 10 and Machine Learning (ML) and Graph are not an option in the drop down, I have removed the sample data and re-added it, refreshed and it’s still not working, I am not ab… --- ## [Change elastic's index name to a kubernetes pod label](https://discuss.elastic.co/t/change-elastics-index-name-to-a-kubernetes-pod-label/314324)
**Author:** [@Ivan\_Gonzalez](https://discuss.elastic.co/u/Ivan_Gonzalez)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 6:03pm UTC](https://discuss.elastic.co/t/change-elastics-index-name-to-a-kubernetes-pod-label/314324 "2022-09-13T18:03:53Z")
Hi guys. I am migrating from fluentbit to filebeat to ship logs from kubernetes to graylog 4. The idea is to create 'graylog-application\_name' indexes to let me know identify properly which data holds each index. As f… --- ## [Need to know ways of controlling the write to storage account for event hub access](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551)
**Author:** [@karthik\_Ravichandran](https://discuss.elastic.co/u/karthik_Ravichandran)\ **Replies:** 17\ **Last updated:** [September 13, 2022, 6:00pm UTC](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551 "2022-09-13T18:00:41Z")
I am having azure event hub as input logstash code , please advise how can i controlling events the write to storage account for event Hub Acess , this method will help in cost saving. please advise your thoughts --- ## [Elasticsearch Installation 8.4](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 9\ **Last updated:** [September 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601 "2022-09-13T17:42:19Z")
Hi Team, I am trying to install elasticsearch-8.4 version on a centos vm. The steps i followed are: Java Installation Creating a repo file Install Elasticsearch Start ES Note: i have not made any changes in yml file.… --- ## [Pause between events ingested in elasticsearch](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 13\ **Last updated:** [September 13, 2022, 5:22pm UTC](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025 "2022-09-13T17:22:54Z")
hello, I would like to know if it is possible, and if there is any filter that can put a time between events before sending them to elastic, for example: I have logs in elastic that are being ingested in the same second,… --- ## [How to configure fleet server and enroll agents?](https://discuss.elastic.co/t/how-to-configure-fleet-server-and-enroll-agents/314314)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 5:20pm UTC](https://discuss.elastic.co/t/how-to-configure-fleet-server-and-enroll-agents/314314 "2022-09-13T17:20:35Z")
Hi, I have an ELK stack which newly installed and need to configure the fleet server from scratch. [Previous page](https://discuss.elastic.co/latest.md?page=966) [Next page](https://discuss.elastic.co/latest.md?page=968)